CA2068884A1 - Removable disk drive security module with lockable write protect feature - Google Patents
Removable disk drive security module with lockable write protect featureInfo
- Publication number
- CA2068884A1 CA2068884A1 CA002068884A CA2068884A CA2068884A1 CA 2068884 A1 CA2068884 A1 CA 2068884A1 CA 002068884 A CA002068884 A CA 002068884A CA 2068884 A CA2068884 A CA 2068884A CA 2068884 A1 CA2068884 A1 CA 2068884A1
- Authority
- CA
- Canada
- Prior art keywords
- removable module
- disk drive
- base unit
- further including
- lock
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
- 238000003780 insertion Methods 0.000 claims description 12
- 230000037431 insertion Effects 0.000 claims description 10
- 230000003213 activating effect Effects 0.000 claims description 7
- 230000000875 corresponding effect Effects 0.000 claims 10
- 230000008878 coupling Effects 0.000 claims 3
- 238000010168 coupling process Methods 0.000 claims 3
- 238000005859 coupling reaction Methods 0.000 claims 3
- 241000269627 Amphiuma means Species 0.000 claims 1
- 238000003032 molecular docking Methods 0.000 abstract description 71
- 230000007246 mechanism Effects 0.000 abstract description 12
- 230000013011 mating Effects 0.000 description 8
- 230000006870 function Effects 0.000 description 5
- 230000004913 activation Effects 0.000 description 4
- 238000001994 activation Methods 0.000 description 4
- 238000009987 spinning Methods 0.000 description 4
- 230000004075 alteration Effects 0.000 description 3
- 238000013500 data storage Methods 0.000 description 3
- 230000000903 blocking effect Effects 0.000 description 2
- 238000010276 construction Methods 0.000 description 2
- 238000012544 monitoring process Methods 0.000 description 2
- 230000003287 optical effect Effects 0.000 description 2
- NSMXQKNUPPXBRG-SECBINFHSA-N (R)-lisofylline Chemical compound O=C1N(CCCC[C@H](O)C)C(=O)N(C)C2=C1N(C)C=N2 NSMXQKNUPPXBRG-SECBINFHSA-N 0.000 description 1
- 230000008901 benefit Effects 0.000 description 1
- 238000013478 data encryption standard Methods 0.000 description 1
- 230000009849 deactivation Effects 0.000 description 1
- 230000003247 decreasing effect Effects 0.000 description 1
- 230000002950 deficient Effects 0.000 description 1
- 230000002708 enhancing effect Effects 0.000 description 1
- 238000013265 extended release Methods 0.000 description 1
- 239000011888 foil Substances 0.000 description 1
- 239000000463 material Substances 0.000 description 1
- 239000002184 metal Substances 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004044 response Effects 0.000 description 1
Classifications
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B33/00—Constructional parts, details or accessories not provided for in the other groups of this subclass
- G11B33/12—Disposition of constructional parts in the apparatus, e.g. of power supply, of modules
- G11B33/121—Disposition of constructional parts in the apparatus, e.g. of power supply, of modules the apparatus comprising a single recording/reproducing device
- G11B33/122—Arrangements for providing electrical connections, e.g. connectors, cables, switches
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B19/00—Driving, starting, stopping record carriers not specifically of filamentary or web form, or of supports therefor; Control thereof; Control of operating function ; Driving both disc and head
- G11B19/02—Control of operating function, e.g. switching from recording to reproducing
- G11B19/04—Arrangements for preventing, inhibiting, or warning against double recording on the same blank or against other recording or reproducing malfunctions
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B33/00—Constructional parts, details or accessories not provided for in the other groups of this subclass
- G11B33/12—Disposition of constructional parts in the apparatus, e.g. of power supply, of modules
- G11B33/121—Disposition of constructional parts in the apparatus, e.g. of power supply, of modules the apparatus comprising a single recording/reproducing device
- G11B33/123—Mounting arrangements of constructional parts onto a chassis
- G11B33/124—Mounting arrangements of constructional parts onto a chassis of the single recording/reproducing device, e.g. disk drive, onto a chassis
Landscapes
- Storage Device Security (AREA)
Abstract
A security module (2) for a removable disk drive (20) having a lockable hardware write protect feature for use with docking base (1). Additional features provided by the invention are an enclosure and electrical connection interface designed to reduce or eliminate radio frequency interference (RFI) and electromagnetic interference (EMI), a removal mechanism that provides for orderly powering down of a disk drive (20) before removal of the security module (2) from a docking base (1), and a module latching and lock mechanism that provides for positive, lockable securement of the module (2) into a docking base (1).
Description
W O 91/07743 PC~r/US90/06542 -1- 2 ~; ,. ` ~
REMOVABLE DISK DRIVE SECURITY MODULE
WITH LOCKABLE WRITE PROTECT FEATURE
BACKGROUND OF THE INVENTION
1. Field of the Invention This invention relates to removable disk drives for computer systems, and more particularly to a security module for a removable disk drive having a lockable write protect feature, and an associated docking base.
REMOVABLE DISK DRIVE SECURITY MODULE
WITH LOCKABLE WRITE PROTECT FEATURE
BACKGROUND OF THE INVENTION
1. Field of the Invention This invention relates to removable disk drives for computer systems, and more particularly to a security module for a removable disk drive having a lockable write protect feature, and an associated docking base.
2. Description of Related Ar~
In the early history of computer data storage devices, magnetic disk drives having removable magnetic platters were commonly used. This configuration of equipment permitted the use of a number of sets of platters with one drive unit,resulting in substantial economies since much of the cost of such a disk drive unit was in the motor drive unit, read/write head structure, and control electronics.Another advantage of such a configuration is that the platters could be removed and safely stored for security purposes.
One common feature of such removable platter disk drive units was a "write protect" switch that activated a hardware control system of the disk drive itself.
The write protect feature prevented data from being written to the platters, thereby protecting the data on such platters trom inadvertent alteration or erasure. While sof~ware could be used to provide a degree of write protection, a hardware implementation of the feature was found to be more secure from sof~ware error and intentional software tampering. However, a disadvantage of the prior art is that the operator was required ~o remember to activate the write-protect switch.Moreover, such drives did not prevent accidental or negligent deactivation of the write-protect switch.
More recently, the cost of computer disk drives has decreased dramatically to the point that the platters, drive motor, read/write head structure, and control electronics are sold as a single unit, with the platters typically hermetically sealed W O 91/07743 ~ PC~r/US90/06542 ~ 2-within the unit. With the platters sealed within the disk drive, reliability of such drives is substantially improved over disk drives with removable platters.
A disadvantage of sealed disk drives has been that they are normally not clesigned to be easily removed from a computer system. Such removability is s desirable for a number of reasons, including ready replacement of defective drives and transportation of data from one computer system to another. However, probably the most important reason for such removability is to permit removal ofdrives containing sensitive data for security purposes. In some cases, data may be so sensitive that a removed drive must be stored in a vault when not in use.
Another disadvantage of commonly available sealed drives is that they typically do not provide a dedicated, lockable write protection feature. While some driveshave interfaces which includa a WRITE signal line which can be trapped and blocked to emulate a write-protect input, in other drives (such as disk drives having a Small Computer System Interface), all commands` are logically coded, and no provision exists for activating a dedicated write-protect input or blocking a WRITE signal without very sophisticated (and hence expensive) command monitoring and decoding.
With the advent of small format disk drives (e.g., commonly available 5l/4'' and 31/2'' form factor drives), a number of removable disk drives have been introduced.
Some of these products include a "docking base" coupled to a computer system and having a power supply and computer interface, with the disk drive itself being removable from the docking base. In other products, the disk drive, power supply, and computer inter~ace form a removable unit, although the computer system may have a "docking interface" for making electrical connections to the removable unit.
However, a continuing disadvantage of such removable drives is that they do not provide a lockable, hardware write protection feature.
It is therefore desirable to provide a removable disk drive unit having a lockable, hardware write protection feature. It is also desirable to provide a locking switch W O 91/07743 PC~r/US90/06542 _3_ J ~ ? ~ ~ i mechanism for controlling the write protection feature, in order to provide better security for the system. The present invention meets these needs as well as providing other desirable features and functions.
WO 9t/07743 ~ PCI-/US90/06542 SUMMARY OF THE INVENTION
The present invention provides a docking base and a removable disk drive module having a lockable hardware write protection feature. The invention may be configured such that a low-voltage power supply and computer interface are situated within the docking base, or the power supply is situated within the removable module, or the power supply is external to the docking base and removable module. The docking base may be configured to receive one or more removable modules, and dimensioned to fit removable modules of various sizes.
The removable modules may be dimensioned to fit disk drives of various sizes.
Additional features provided by the invention are (1) a lockable tamper-resistant drive module having an electrical connection interface designed to reduce or eliminate radio frequency interference (RFI) and electromagnetic interference (EMI), (2) a unique drive module removal mechanism that provides for orderly powering down of a disk drive before removal of the module from a docking base, (3) a unique drive module latching and lock mechanism that provides for positive, lockable securement of the module into a docking basc; (4) a usage counter to indicate the number of insertion/removals of the removable module and/or power applications to the enclosed disk drive; and (5) an electronic encryption circuit in the docking base so that data written on the disk drive in a removable module can only be deciphered when that removable module is used in a base unit.
The invention permits complete removal of a disk drive module from its docking base for security purposes, data transport, and replacement. The inventive removable module can be securely locked into a docking base, as well as locked into a write-protect mode or read-write mode such that the mode cannot be changed without a key or combination to the lock. The ability to lock the removable module into a write-protect mode provides data security when the disk drive module is in US9, without concern for accidental or negligent alteration or erasure of data. Further, the removable module can be securely locked into a docking base in an inoperative mode, so that the data cannot be read and the removable module cannot be removed. In addition, the removable module can -5- 2 ~ i-j ,s~
be securely locked out of a docking base, so that the disk drive cannot even be read, thus providing an added measure of data security.
Further aspects of the present invention will become apparent from the followingdetailed description when considered in conjunction with the accompanying drawings. It should be understood, however, that the detailed description and the specific examples, while representing the preferred embodiment and several alternative embodiments of the invention, are given by way of illustration only.
W O 91/07743 PC~r/US90/06542 ~ 6-BRIEF DESCRIPTION OF THE DRAWINGS
FIGURE 1 is a perspective view of the preferred embodiment of the invention, showing a dual-bay docking base and one removable module inserted within the docking base.
FIGURE 2 is a perspective, transparent view of a removable module.
FIGURE 3 is a top, partial cross-section view of a removable module, with the handle shown in three different positions.
FIGURE 4 is a top view of a docking base, showing in cross-section one connector and removable module latching mechanism.
FIGURE 5a is a side cross-sectional view ot a docking base and a removable module, showing an alternative latching mechanism in an engaged position.
FIGURE 5b is a side cross-sectional.view of a docking base and a removable module, showing an alternative latching mechanism in a disengaged position.
Like reference numbers in the various drawings refer to like elements.
WO 91/07743 Pcr/US9O/06542 ~7~ 2 ~ ,? ~
DETAILED D~SCRIPTION OF THE INVENTION
The following description is of the best presently contemplated modes of car~ingout the invention. This description is made for the purpose of illustrating the general principles ot the invention and should not be taken in a limiting sense.
s FIGURE 1 shows a dual-bay dockiny base 1 and one removable module 2 inserted within a bay 3 of the docking base 1. The docking base 1 may be provided with mounting holes 4 so that the docking base 1 may be secured to a table, rack, or other structure. By providing the mounting holes 4 within eachbay 3 of the docking base 1, the mounting hardware (such as the screws 5 shown in FIGURE 1) in each bay 3 of the docking base 1 is inaccessible for removal when a removable module 2 is mounted within the bay 3.
It should be noted that the functions and features of the docking base 1 can be incorporated directly into a computer rack, enclosure, or work station, without necessarily providing a separate component structure of the type shown in FIGURE 1. ~
In the preferred embodiment, each removable module 2 is sized to house a 31/2"
hrm factor disk drive, and each bay 3 of the docking base 1 is sized to receive such removable modules 2. Single-bay or multiple-bay docking bases 1 may be fashionsd as desired. The removable modules 2 may be dimensioned to accommodate disk drives of other sizes (e.g., 51~4~ form factor drives), or be configured to accommodate different sizes of drives (e.g., a nominal 51/4" form factor removable module 2 could also accommodate smaller form factor drives, such as 31/2" drives). Similarly, the docking base 1 may be dimensioned to accommodate removable modules 2 of different sizes.
FIGURE 2 shows a removable module 2 in greater detail. Each removable module 2 is configured to receive a disk drive 20, which preferably is similar ~o Hitachi Model No. DK312C or Fujitsu Model No. M2314AS. Such drives provide a dedicated write-protect input 21 which, when coupled to an appropriate control signal (e.g., a ground connection or voltage signal), prevents writing to the disk ~ 8-drive medium. However, other drives lacking a built-in write-protect input may be used by providing a control circuit that adds such write-protection to the disk drive (for example, by monitoring signal commands from the computer system to the disk drive, and blocking any WRITE signals or encoded commands from being transmitted to the disk drive). Such a control circuit would include a write-protect input 21.
Such drives may also provide a spin-down signal input 19 which, when coupled to an appropriate control signal or command, provides for orderly parking of theread/write heads of the disk drive 20 and stops rotation of the disk platters.
lo Alternatively, such drives may automatically park their read/write heads when power to the disk drive 20 is disconnected.
The disk drive 20is coupled to a power supply 22. The power supply 22 may be located within each removable module 2, or within a docking base 1, or external to the invention, such as in a computer rack.
Each removable module 2 is provided with an extensible, lockable handle 23.
When unlocked, the handle 23 provides a convenient means for removing the ,semovable module 2 from a bay 3 of a docking base 1, and for carrying the ~/removable module 2 about. FIGURE 3 shows a top view of a removable module 2 with the handle 23 shown in three different positions: retracted, intermediate, and extended. As shown in FIGURES 2 and 3, the handle 23 normally fits flush against the front of the removable module 2. The handle 23 thus does not normally provide a convenient means for pulling the removable module 2 out of the docking base 1.
Situated in each removable module 2is a lock 24, which is located in the handle 23 in the preferred embodiment. For simplicity, the lock 24 is preferably a key lock, but other locks, such as mechanical or electronic combination locks or rotary tumbler locks, may be used. In the preferred embodiment, the lock 24is at least a four-position lock, the four positions corresponding to ~'non-removable, no write protectU~ "non-removable, write protect", "removable, no write protec~, and 3 0 "removable, write protect". Alternatively, the lock 24 may have positions W O 91/07743 PC~r/US90/06542 2 ~ ~, .' t, ~
corresponding to ~non-removable, no write protect~, "non-removable, write protect~', (optionally, "non-removable, power of~'), and "removable" (or, optionally, "removable, power of~'). The front of the removable module 2 adjacent the lock 24 may be appropriately marked to indicate the meaning of each position of the lock 24.
In the preferred embodiment, the lock 24 has a lock cam 25 which rotates to different positions as the lock 24 is turned, via a key, to corresponding positions.
When the lock 24 is turned to a Unon-removable'' position, the lock cam 25 preferably physically interacts with the front of the removable module 2, such as by protruding into a first slot 27a cut within the removable module 2 (see FIGURE
3). In such a configuration, the lock 24 prevents extension of the handle 23 if the handie 23 is retracted when the lock 24 is placed in a locked position with the lock cam 25 protruding into the first slot 27a. Conversely, the lock 24 preventsretraction of the handle 23 if the handle 23 is extended when the lock 24 is placed in a locked position.
At least one write-protect switch 26 (one tor each write protect position of the lock 24) is situated such that one such switch is activated by the lock cam 25 when ths lock 24 is turned to a Uwrite protect~' position. Each switch may be a photo-interrupt type switch (i.e., activated by the interruption of a light source when the lock cam 25 passes through an opening in the switch), a microswitch, or any other type of switch.
Each write-protect switch 26, when activated by the lock cam 25, provides an appropriate control signal to the write-protect input 21 of the disk drive 20. The ability to lock the removable module 2 into a write-protect mode provides data security when the removable module 2 is in use, without concern for accidental or negligent alteration or erasure of data on the disk drive 20. It should be noted that the disk drive 20 in a removable module ~ can be write-protected even when the removable module 2 is not inserted within a docking base 1. This permits such a removable module 2 to be moved from station to station without concern tor writing over important data.
W O 91/07743 ,.~ PCT/US90/06542 Optionally, each write-protect switch 26 is also coupled to a control circuit 29 that provides an indication when write protection has been activated in response to the status of the write-protect switches 26. Such an indication may be, for example,a signal light 28 (such as a light emitting diode).
Other combinations of a lock and switches may be used to accomplish the same functions as the particular configuration of the lock 24 and write-protect switches 26 described above.
The removable module 2 optionally may have a secondary write-protect switch (not shown), such as a dual-in-line package (DIP) switch, located in the removable module 2 such that the secondary switch is not accessible when the removable module 2 is inserted within a bay 3 of a docking base 1. The secondary switch is coupled to the write-protect input 21 of the disk drive 20 so as to provide ameans ot overriding the write-protect switches 26 so that the disk drive 20 is always write-protected despite the setting of the lock 24.
Alternatively, the secondary write-protect switch may be located within the docking base 1 and electrically coupled via a connector to the write-protect input 21 ofthe disk drive 20 in each inserted removable module 2. This configuration provides a means of overriding the write-protect switches 26 of every inserted removable module 2 so that its disk drive 20 is always write-protected despite the setting of the lock 24 of the removable module 2.
In the preferred embodiment of the invention, the handle 23 of the removable module 2 provides a number of features. In one embodiment of the invention, after the lock 24 is turned to a position permitting removal of the removable module 2 from a docking base 1, pulling the top of the handle 23 to the intermediate position activates a removal switch 32 (see FIGURE 2). The removal switch 32 may be a photo-interrupt type switch, a microswitch, or any other typeof switch. Activation of the removal switch 32 sends a spin-down signal to the spin-down signal input 19 of a disk drive 20 so equipped. This permits orderly parking of the read/write heads of the disk drive 20, thereby lessening the chances of damage to the data upon removal of the removable module 2.
WO 91tO7743 PCI/US90/06~42 In an alternative embodiment, useful for disk drives 20 lacking a spin-down signal input 19, activation of the removal switch 32 interrupts power to the disk drive 20.
This activates any automatic head parking feature of the disk drive 20, and, more importantly, permits the disk platters to stop spinning before the removable module 2 is pulled from the docking base 1. Again, this lessens the chances of damage to the data upon removal of the removable module 2.
Providing a spin-down period for the platters of a disk drive 20 is preferable to simply pulling the removable module 2 out of the docking base 1, which can cause a disk head crash against the still-spinning platters even in disk drives lo having a self-parking feature for the read/write heads.
The intermediate spin-down position of the handle 23 may be indicated tactilely by providing a detent at the proper position, thereby signifying to an operator that the handle 23 should not be pulled further until the spin-down operation is completed. Optionally, a solenoid~ pe latch (not shown) may be activated by the activation of the removal switch 32 to prevent further extension of the handle 23 until the spin-down operation is completed. The solenoid latch would then release the handle 23 for further extension.
The removal switch 32 optionally may be coupled to the control circuit 29 to provide an indication when a spin-down operation is under way. Such an indication may be, for example, a signal light 33 (such as a light emitting diode) and/or a sound transducer (such as piezoelectric beeper) 34. In the preferred embodiment, the control circuit 29 causes the signal light 33 to ~lash red whilethe disk platters are still spinning, and to turn to a steady green after spin-down is completed. In the preferred embodiment, the control circuit 29 also causes the sound transducer 34 to sound an alarm if the handle 23 is pulled past its intermediate position before spin-down is completed.
As should be clear from the above description, locking the handle 23 into its retracted position while a removable module 2 is inserted within a bay 3 of a docking base 1 prevents removal of the removable module 2. It should also be noted that, in the preferrsd embodiment, locking the handle 23 into its extended ~ " ~, ~ PCI'/US90/06542 position permits insertion of a removable module 2 into a bay 3 of a docking base 1 but prevents operation of its disk drive 20, since the removal switch 32 remains in its activated position until the handle 23 is fully retracted. In an alternative embodiment, the lock 24 may be configured to extand a projection beyond the body of a removable module 2 when the handle 23 is locked into an extended position, or if the lock 24 is turned while the removable module 2 is not inserted into a docking base 1. The projection serves to block insertion of the removablemodule 2 into a docking base 1 by interference with the sides, top, and/or bottom of a bay 3. In either configuration, the removable module 2 is effectively locked 10 out of a docking base 1, so that the disk drive 20 cannot even be read.
A second slot 27b, cut within the removable module 2 (see FIGURE 3), may be provided as an additional security feature. When the handle 23 is in the intermediate position, the lock cam 25 can be turned to protrude into the secondslot 27b. Locking the handle 23 into the intermediate position causes the disk 15 drive 20 to be spun-down and powered-off, while preventing removal of the removable module 2 from its docking base 1.
If the lock 24 is provided with a "non-rèmovable, power of~' position, the lock 24 activates an optional switch (not shown ) that turns off power to the disk drive 20.
Such a switch may be used in lieu of or in addition to the second slot 27b 2 0 described above.
Referring now to FIGURE 3, the rear of the removable module 2 includes an electricai connector 35 that provides an interface between the disk drive 20 within the removable module 2 and a mating connector 40 (shown in FIGURE 4) in a bay 3 of the docking base 1. The electrical connector 35 provides for both power25 and signal lines. The electrical connector 35 and mating connector 40 are preferably low-insertion force or zero-insertion force connectors. The mating connector 4û is coupled via a cable (not shown) to a computer system.
The docking base 1 optionally may include a data encryption circuit electrically co~p~ed between the disk drive 20 and a computer system (not shown) for 30 encrypting and decrypting all data stored on the disk drive 20. The encryption -13- ~Vi,"3(~ i circuit may conform, for example, to the National Data Encryption Standard. Suchencryption circuits are well-known, and available commercially on a single integrated circuit. If a removable module 2 is stolen, the encrypted data on theenclosed disk drive 20 will still be secure.
The rear of the removable module 2 also includes latch flanges 36 configured to engage corresponding spring-loaded latches 41 situated within a bay 3 of the docking base 1, as shown in FIGURE 4. When the removable module 2 is fully inserted into a bay 3, the electrical connector 35 mates with the mating connector 40, and the spring-loaded latches 41 engage and hold the latch flanges 36 of theremovable module 2. The removable module 2 is thus positively and securely held within the bay 3 of the docking base 1. If the lock 24 is then positioned to a "non-removable'l setting, the removable module 2 cannot be removed from the docking base 1 because the handle 23 is secured into its retracted position by the lock 24.
In the preferred embodiment, the handle 23 is connected via a pivoting lever 30 to two release rods 31 such that, as the handle is pulled 23 from its retracted position all the way to its extended position, the pivoting lever 30 pushes the release rods 31 away from the front of the removable module 2 to a rearward extended position (shown in outline in FIGURE 3). The extended release rods 31 push against an angled face of the spring-loaded latches 41, forcing the latches41 to retract. The latches 41 thus release engagement with the latch flanges 36,and the removable module 2 can be pulled by the handle 23 out of the docking base 1, separating the electrical connector 35 from the mating connector 40.
As noted above, the functions and features of the docking base 1 can be incorporated directly into a computer rack or enclosure. Thus, the mating connector 40 and spring-loaded latches 41 can be situated directly within a computer rack or enclosure rather than In a separate structure, while still functioning as a docking base 1 for a removable module 2.
Other configurations of latching and release mechanisms can also be used to 3 0 accornplish the same functions as the particular configuration of described above.
WO 91/07~43 c~ `' '`'~ .` ` `- PCI/US90/06542 One such mechanism includes a solenoid latch releasable by the position of the lock 24 as determined by the write-protect switches 26 or similar switches.
Another such mechanism is shown in FIGURES 5a and ~b. In FIGURE 5a a handle shi~t 50 is attached through a slip collar 51 to a latch actuator 52 having a raised region 53 near or at the other end. The latch actuator 52 is preferablyspring-biased towards the rear of the removable module 2. The latch actuator 52 is in mechanical contact with a spring-biased pivotable latch 54 having a catch flange 55. When the handle 23 is recessed within the removable module 2, the catch flange 55 engages a latch recess 56 in the docking base 1. An angled lo slide 59 on the docking base 1 forces the catch flange 55 down when the removable module 2 is inserted into the docking base 1, thus guiding the catch flange 55 into engagement with the latch recess 56.
When the handle 23 is pulled out towards its extended position, the handle sha~t50 slides through the slip collar 51 until a stop 57 (such as an o-ring) affixed to the handle shaft 50 catches on the slip collar 51 (see FIGUFIE 5b). Further pulling of the handle 23 will cause the latch actuator 52 to be pulled forward, thereby causing the raised region 53 of the latch actuator 52 to pivot the latch 54.
Preferably, a roller 59 is provided on the latch 54 as the contact point with the latch actuator 52, to reduce wear and the pull force. As the latch 54 pivots, the latch flange 55 disengages from the latch recess 56, thereby permitting the removable module 2 to be extracted from the docking base 1.
An additional feature provided by the invention is a mechanical and electrical configuration of the docking base 1 and removable module 2 designed to reduce or eliminate radio frequency interference (RFI) and electromagnetic interference(EMI). In the preferred embodiment, the case of the removable module 2 is of unitary construction, with all seams welded closed or shielded by internally positioned shielding materials (e.g., metal plates or foils). The number of openings in the removable module 2 is minimized to reduce the number of possible sites for RFI and EMI leakage. The shape of the docking base 1 in the preferred embodiment is such that the electrical connections between each removable module 2 and the docking base 1 are recessed within the shielding WO 91/07743 ~ 3 ~ ;'3 '` (`
walls of the docking base 1. In addition, the electrical connector 35 is surrounded by the sides of the enclosure of the removable module 2, up to the latch flanges36. Engagement of the spring-loaded latches 41 with the latch flanges 36 effectively forms an interlocking shield around the electrical connector 35 and the mating connector 40. Such interlocking substantially reduces or entirely eliminates RFI and EMI leakage Srom the electrical connector 35 and the mating connector 40.
Another feature permitted by the unitary construction of the removable module 2 is that all internal components (e.g., the disk drive 20, control circuit 29, etc.) can be mounted so that no fasteners are exposed except through the recessed region on the front of the removable module 2 that accommodates the handle 23. Thus, as shown in FIGURE 3, rear fasteners 37a secure the electrical connector 35 to the removable module 2 from the interior of the module. The front bezel of the removable module 2, which includes the handle 23, is secured to the module by front fasteners 37b. Since the front fasteners 37b are only accessible when the handle 23 is in its fully extended position, the removable module 2 can only be disassembled when the handle 23 is unlocked and fully extended.
Thus, the invention permits removal of a removable module 2 from a docking base 1 for transportation in a manner that prevents disassembly of the module to get access to the disk drive 20. Since the handle 23 can be locked into its recessedor intermediate, power-off position, access to the data on the disk drive 20 is denied, thereby enhancing security.
Another security feature option of the present invention is the addition of one or more counters (mechanical or electrical) to indicate (1) the number of insertions of a removable module 2 into a docking base 1, and/or (2) the number of times a disk drive 20 within a removable module 2 is powered up or down. Such a counter may be integrated into a removable module 2, or affixed within a dockingbase bay 3. The counter may optionally have a display 38 (see FIGURE 2) to indicate the count value. In the preferred embodiment of the invention, a counter _0 circuit is provided as part of the control circuit 29, and incremented by changes in state of the removal switch 32. Preferably, the counter circuit includes non-W O 91tO7743 ~ PC~r/US90/06542 ;` ~ `., ".
"-~ ! ` ' ` . ~ --16--volatile memory (such as a mechanical register or electrically-alterable read only memory) for storing the number of activations of the removal switch 32.
In summary, the lock 24 of the removable module 2 provides a means for activating the write-protect input of the enclosed disk drive 20. The docking base 1 may be securely fastened to other structures, such that the docking base 1 cannot be removed if it contains one or more locked removable modules 2. The removable module 2 can be positively and securely held within a bay 3 of a docking base 1 via a latching mechanism which can only be released by extension of the handle 23. The removable module 2 can be locked into place in a docking base 1 by locking the handle 23. The handle 23 further provides a means for safely spinning down an enclosed disk drive 20 before removal of its removable module 2 from a docking base 1. Moreover, the removable module 2 and the docking base 1 are designed to reduce tampering, and to reduce or eliminate radio frequency interference (RFI) and electromagnetic interference (EMI) by shielding points of possible signal leakage.
A number of embodiments of the present invention have been described.
Nevertheless, Tt will be understood that various modifications may be made without departing from the spirit and scope of the invention. For example, although the illustrated embodiment has been described in the context of magnetic disk drive 2 0 data storage devices, the invention could easily be adapted to other data storage devices, such as write-once-read-mostly ~WORM) optical drives and erasable optical drives. Accordingly, it is to be understood that the invention is not to be iimited by the specific illustrated embodiment, but only by the scope of the appended claims.
In the early history of computer data storage devices, magnetic disk drives having removable magnetic platters were commonly used. This configuration of equipment permitted the use of a number of sets of platters with one drive unit,resulting in substantial economies since much of the cost of such a disk drive unit was in the motor drive unit, read/write head structure, and control electronics.Another advantage of such a configuration is that the platters could be removed and safely stored for security purposes.
One common feature of such removable platter disk drive units was a "write protect" switch that activated a hardware control system of the disk drive itself.
The write protect feature prevented data from being written to the platters, thereby protecting the data on such platters trom inadvertent alteration or erasure. While sof~ware could be used to provide a degree of write protection, a hardware implementation of the feature was found to be more secure from sof~ware error and intentional software tampering. However, a disadvantage of the prior art is that the operator was required ~o remember to activate the write-protect switch.Moreover, such drives did not prevent accidental or negligent deactivation of the write-protect switch.
More recently, the cost of computer disk drives has decreased dramatically to the point that the platters, drive motor, read/write head structure, and control electronics are sold as a single unit, with the platters typically hermetically sealed W O 91/07743 ~ PC~r/US90/06542 ~ 2-within the unit. With the platters sealed within the disk drive, reliability of such drives is substantially improved over disk drives with removable platters.
A disadvantage of sealed disk drives has been that they are normally not clesigned to be easily removed from a computer system. Such removability is s desirable for a number of reasons, including ready replacement of defective drives and transportation of data from one computer system to another. However, probably the most important reason for such removability is to permit removal ofdrives containing sensitive data for security purposes. In some cases, data may be so sensitive that a removed drive must be stored in a vault when not in use.
Another disadvantage of commonly available sealed drives is that they typically do not provide a dedicated, lockable write protection feature. While some driveshave interfaces which includa a WRITE signal line which can be trapped and blocked to emulate a write-protect input, in other drives (such as disk drives having a Small Computer System Interface), all commands` are logically coded, and no provision exists for activating a dedicated write-protect input or blocking a WRITE signal without very sophisticated (and hence expensive) command monitoring and decoding.
With the advent of small format disk drives (e.g., commonly available 5l/4'' and 31/2'' form factor drives), a number of removable disk drives have been introduced.
Some of these products include a "docking base" coupled to a computer system and having a power supply and computer interface, with the disk drive itself being removable from the docking base. In other products, the disk drive, power supply, and computer inter~ace form a removable unit, although the computer system may have a "docking interface" for making electrical connections to the removable unit.
However, a continuing disadvantage of such removable drives is that they do not provide a lockable, hardware write protection feature.
It is therefore desirable to provide a removable disk drive unit having a lockable, hardware write protection feature. It is also desirable to provide a locking switch W O 91/07743 PC~r/US90/06542 _3_ J ~ ? ~ ~ i mechanism for controlling the write protection feature, in order to provide better security for the system. The present invention meets these needs as well as providing other desirable features and functions.
WO 9t/07743 ~ PCI-/US90/06542 SUMMARY OF THE INVENTION
The present invention provides a docking base and a removable disk drive module having a lockable hardware write protection feature. The invention may be configured such that a low-voltage power supply and computer interface are situated within the docking base, or the power supply is situated within the removable module, or the power supply is external to the docking base and removable module. The docking base may be configured to receive one or more removable modules, and dimensioned to fit removable modules of various sizes.
The removable modules may be dimensioned to fit disk drives of various sizes.
Additional features provided by the invention are (1) a lockable tamper-resistant drive module having an electrical connection interface designed to reduce or eliminate radio frequency interference (RFI) and electromagnetic interference (EMI), (2) a unique drive module removal mechanism that provides for orderly powering down of a disk drive before removal of the module from a docking base, (3) a unique drive module latching and lock mechanism that provides for positive, lockable securement of the module into a docking basc; (4) a usage counter to indicate the number of insertion/removals of the removable module and/or power applications to the enclosed disk drive; and (5) an electronic encryption circuit in the docking base so that data written on the disk drive in a removable module can only be deciphered when that removable module is used in a base unit.
The invention permits complete removal of a disk drive module from its docking base for security purposes, data transport, and replacement. The inventive removable module can be securely locked into a docking base, as well as locked into a write-protect mode or read-write mode such that the mode cannot be changed without a key or combination to the lock. The ability to lock the removable module into a write-protect mode provides data security when the disk drive module is in US9, without concern for accidental or negligent alteration or erasure of data. Further, the removable module can be securely locked into a docking base in an inoperative mode, so that the data cannot be read and the removable module cannot be removed. In addition, the removable module can -5- 2 ~ i-j ,s~
be securely locked out of a docking base, so that the disk drive cannot even be read, thus providing an added measure of data security.
Further aspects of the present invention will become apparent from the followingdetailed description when considered in conjunction with the accompanying drawings. It should be understood, however, that the detailed description and the specific examples, while representing the preferred embodiment and several alternative embodiments of the invention, are given by way of illustration only.
W O 91/07743 PC~r/US90/06542 ~ 6-BRIEF DESCRIPTION OF THE DRAWINGS
FIGURE 1 is a perspective view of the preferred embodiment of the invention, showing a dual-bay docking base and one removable module inserted within the docking base.
FIGURE 2 is a perspective, transparent view of a removable module.
FIGURE 3 is a top, partial cross-section view of a removable module, with the handle shown in three different positions.
FIGURE 4 is a top view of a docking base, showing in cross-section one connector and removable module latching mechanism.
FIGURE 5a is a side cross-sectional view ot a docking base and a removable module, showing an alternative latching mechanism in an engaged position.
FIGURE 5b is a side cross-sectional.view of a docking base and a removable module, showing an alternative latching mechanism in a disengaged position.
Like reference numbers in the various drawings refer to like elements.
WO 91/07743 Pcr/US9O/06542 ~7~ 2 ~ ,? ~
DETAILED D~SCRIPTION OF THE INVENTION
The following description is of the best presently contemplated modes of car~ingout the invention. This description is made for the purpose of illustrating the general principles ot the invention and should not be taken in a limiting sense.
s FIGURE 1 shows a dual-bay dockiny base 1 and one removable module 2 inserted within a bay 3 of the docking base 1. The docking base 1 may be provided with mounting holes 4 so that the docking base 1 may be secured to a table, rack, or other structure. By providing the mounting holes 4 within eachbay 3 of the docking base 1, the mounting hardware (such as the screws 5 shown in FIGURE 1) in each bay 3 of the docking base 1 is inaccessible for removal when a removable module 2 is mounted within the bay 3.
It should be noted that the functions and features of the docking base 1 can be incorporated directly into a computer rack, enclosure, or work station, without necessarily providing a separate component structure of the type shown in FIGURE 1. ~
In the preferred embodiment, each removable module 2 is sized to house a 31/2"
hrm factor disk drive, and each bay 3 of the docking base 1 is sized to receive such removable modules 2. Single-bay or multiple-bay docking bases 1 may be fashionsd as desired. The removable modules 2 may be dimensioned to accommodate disk drives of other sizes (e.g., 51~4~ form factor drives), or be configured to accommodate different sizes of drives (e.g., a nominal 51/4" form factor removable module 2 could also accommodate smaller form factor drives, such as 31/2" drives). Similarly, the docking base 1 may be dimensioned to accommodate removable modules 2 of different sizes.
FIGURE 2 shows a removable module 2 in greater detail. Each removable module 2 is configured to receive a disk drive 20, which preferably is similar ~o Hitachi Model No. DK312C or Fujitsu Model No. M2314AS. Such drives provide a dedicated write-protect input 21 which, when coupled to an appropriate control signal (e.g., a ground connection or voltage signal), prevents writing to the disk ~ 8-drive medium. However, other drives lacking a built-in write-protect input may be used by providing a control circuit that adds such write-protection to the disk drive (for example, by monitoring signal commands from the computer system to the disk drive, and blocking any WRITE signals or encoded commands from being transmitted to the disk drive). Such a control circuit would include a write-protect input 21.
Such drives may also provide a spin-down signal input 19 which, when coupled to an appropriate control signal or command, provides for orderly parking of theread/write heads of the disk drive 20 and stops rotation of the disk platters.
lo Alternatively, such drives may automatically park their read/write heads when power to the disk drive 20 is disconnected.
The disk drive 20is coupled to a power supply 22. The power supply 22 may be located within each removable module 2, or within a docking base 1, or external to the invention, such as in a computer rack.
Each removable module 2 is provided with an extensible, lockable handle 23.
When unlocked, the handle 23 provides a convenient means for removing the ,semovable module 2 from a bay 3 of a docking base 1, and for carrying the ~/removable module 2 about. FIGURE 3 shows a top view of a removable module 2 with the handle 23 shown in three different positions: retracted, intermediate, and extended. As shown in FIGURES 2 and 3, the handle 23 normally fits flush against the front of the removable module 2. The handle 23 thus does not normally provide a convenient means for pulling the removable module 2 out of the docking base 1.
Situated in each removable module 2is a lock 24, which is located in the handle 23 in the preferred embodiment. For simplicity, the lock 24 is preferably a key lock, but other locks, such as mechanical or electronic combination locks or rotary tumbler locks, may be used. In the preferred embodiment, the lock 24is at least a four-position lock, the four positions corresponding to ~'non-removable, no write protectU~ "non-removable, write protect", "removable, no write protec~, and 3 0 "removable, write protect". Alternatively, the lock 24 may have positions W O 91/07743 PC~r/US90/06542 2 ~ ~, .' t, ~
corresponding to ~non-removable, no write protect~, "non-removable, write protect~', (optionally, "non-removable, power of~'), and "removable" (or, optionally, "removable, power of~'). The front of the removable module 2 adjacent the lock 24 may be appropriately marked to indicate the meaning of each position of the lock 24.
In the preferred embodiment, the lock 24 has a lock cam 25 which rotates to different positions as the lock 24 is turned, via a key, to corresponding positions.
When the lock 24 is turned to a Unon-removable'' position, the lock cam 25 preferably physically interacts with the front of the removable module 2, such as by protruding into a first slot 27a cut within the removable module 2 (see FIGURE
3). In such a configuration, the lock 24 prevents extension of the handle 23 if the handie 23 is retracted when the lock 24 is placed in a locked position with the lock cam 25 protruding into the first slot 27a. Conversely, the lock 24 preventsretraction of the handle 23 if the handle 23 is extended when the lock 24 is placed in a locked position.
At least one write-protect switch 26 (one tor each write protect position of the lock 24) is situated such that one such switch is activated by the lock cam 25 when ths lock 24 is turned to a Uwrite protect~' position. Each switch may be a photo-interrupt type switch (i.e., activated by the interruption of a light source when the lock cam 25 passes through an opening in the switch), a microswitch, or any other type of switch.
Each write-protect switch 26, when activated by the lock cam 25, provides an appropriate control signal to the write-protect input 21 of the disk drive 20. The ability to lock the removable module 2 into a write-protect mode provides data security when the removable module 2 is in use, without concern for accidental or negligent alteration or erasure of data on the disk drive 20. It should be noted that the disk drive 20 in a removable module ~ can be write-protected even when the removable module 2 is not inserted within a docking base 1. This permits such a removable module 2 to be moved from station to station without concern tor writing over important data.
W O 91/07743 ,.~ PCT/US90/06542 Optionally, each write-protect switch 26 is also coupled to a control circuit 29 that provides an indication when write protection has been activated in response to the status of the write-protect switches 26. Such an indication may be, for example,a signal light 28 (such as a light emitting diode).
Other combinations of a lock and switches may be used to accomplish the same functions as the particular configuration of the lock 24 and write-protect switches 26 described above.
The removable module 2 optionally may have a secondary write-protect switch (not shown), such as a dual-in-line package (DIP) switch, located in the removable module 2 such that the secondary switch is not accessible when the removable module 2 is inserted within a bay 3 of a docking base 1. The secondary switch is coupled to the write-protect input 21 of the disk drive 20 so as to provide ameans ot overriding the write-protect switches 26 so that the disk drive 20 is always write-protected despite the setting of the lock 24.
Alternatively, the secondary write-protect switch may be located within the docking base 1 and electrically coupled via a connector to the write-protect input 21 ofthe disk drive 20 in each inserted removable module 2. This configuration provides a means of overriding the write-protect switches 26 of every inserted removable module 2 so that its disk drive 20 is always write-protected despite the setting of the lock 24 of the removable module 2.
In the preferred embodiment of the invention, the handle 23 of the removable module 2 provides a number of features. In one embodiment of the invention, after the lock 24 is turned to a position permitting removal of the removable module 2 from a docking base 1, pulling the top of the handle 23 to the intermediate position activates a removal switch 32 (see FIGURE 2). The removal switch 32 may be a photo-interrupt type switch, a microswitch, or any other typeof switch. Activation of the removal switch 32 sends a spin-down signal to the spin-down signal input 19 of a disk drive 20 so equipped. This permits orderly parking of the read/write heads of the disk drive 20, thereby lessening the chances of damage to the data upon removal of the removable module 2.
WO 91tO7743 PCI/US90/06~42 In an alternative embodiment, useful for disk drives 20 lacking a spin-down signal input 19, activation of the removal switch 32 interrupts power to the disk drive 20.
This activates any automatic head parking feature of the disk drive 20, and, more importantly, permits the disk platters to stop spinning before the removable module 2 is pulled from the docking base 1. Again, this lessens the chances of damage to the data upon removal of the removable module 2.
Providing a spin-down period for the platters of a disk drive 20 is preferable to simply pulling the removable module 2 out of the docking base 1, which can cause a disk head crash against the still-spinning platters even in disk drives lo having a self-parking feature for the read/write heads.
The intermediate spin-down position of the handle 23 may be indicated tactilely by providing a detent at the proper position, thereby signifying to an operator that the handle 23 should not be pulled further until the spin-down operation is completed. Optionally, a solenoid~ pe latch (not shown) may be activated by the activation of the removal switch 32 to prevent further extension of the handle 23 until the spin-down operation is completed. The solenoid latch would then release the handle 23 for further extension.
The removal switch 32 optionally may be coupled to the control circuit 29 to provide an indication when a spin-down operation is under way. Such an indication may be, for example, a signal light 33 (such as a light emitting diode) and/or a sound transducer (such as piezoelectric beeper) 34. In the preferred embodiment, the control circuit 29 causes the signal light 33 to ~lash red whilethe disk platters are still spinning, and to turn to a steady green after spin-down is completed. In the preferred embodiment, the control circuit 29 also causes the sound transducer 34 to sound an alarm if the handle 23 is pulled past its intermediate position before spin-down is completed.
As should be clear from the above description, locking the handle 23 into its retracted position while a removable module 2 is inserted within a bay 3 of a docking base 1 prevents removal of the removable module 2. It should also be noted that, in the preferrsd embodiment, locking the handle 23 into its extended ~ " ~, ~ PCI'/US90/06542 position permits insertion of a removable module 2 into a bay 3 of a docking base 1 but prevents operation of its disk drive 20, since the removal switch 32 remains in its activated position until the handle 23 is fully retracted. In an alternative embodiment, the lock 24 may be configured to extand a projection beyond the body of a removable module 2 when the handle 23 is locked into an extended position, or if the lock 24 is turned while the removable module 2 is not inserted into a docking base 1. The projection serves to block insertion of the removablemodule 2 into a docking base 1 by interference with the sides, top, and/or bottom of a bay 3. In either configuration, the removable module 2 is effectively locked 10 out of a docking base 1, so that the disk drive 20 cannot even be read.
A second slot 27b, cut within the removable module 2 (see FIGURE 3), may be provided as an additional security feature. When the handle 23 is in the intermediate position, the lock cam 25 can be turned to protrude into the secondslot 27b. Locking the handle 23 into the intermediate position causes the disk 15 drive 20 to be spun-down and powered-off, while preventing removal of the removable module 2 from its docking base 1.
If the lock 24 is provided with a "non-rèmovable, power of~' position, the lock 24 activates an optional switch (not shown ) that turns off power to the disk drive 20.
Such a switch may be used in lieu of or in addition to the second slot 27b 2 0 described above.
Referring now to FIGURE 3, the rear of the removable module 2 includes an electricai connector 35 that provides an interface between the disk drive 20 within the removable module 2 and a mating connector 40 (shown in FIGURE 4) in a bay 3 of the docking base 1. The electrical connector 35 provides for both power25 and signal lines. The electrical connector 35 and mating connector 40 are preferably low-insertion force or zero-insertion force connectors. The mating connector 4û is coupled via a cable (not shown) to a computer system.
The docking base 1 optionally may include a data encryption circuit electrically co~p~ed between the disk drive 20 and a computer system (not shown) for 30 encrypting and decrypting all data stored on the disk drive 20. The encryption -13- ~Vi,"3(~ i circuit may conform, for example, to the National Data Encryption Standard. Suchencryption circuits are well-known, and available commercially on a single integrated circuit. If a removable module 2 is stolen, the encrypted data on theenclosed disk drive 20 will still be secure.
The rear of the removable module 2 also includes latch flanges 36 configured to engage corresponding spring-loaded latches 41 situated within a bay 3 of the docking base 1, as shown in FIGURE 4. When the removable module 2 is fully inserted into a bay 3, the electrical connector 35 mates with the mating connector 40, and the spring-loaded latches 41 engage and hold the latch flanges 36 of theremovable module 2. The removable module 2 is thus positively and securely held within the bay 3 of the docking base 1. If the lock 24 is then positioned to a "non-removable'l setting, the removable module 2 cannot be removed from the docking base 1 because the handle 23 is secured into its retracted position by the lock 24.
In the preferred embodiment, the handle 23 is connected via a pivoting lever 30 to two release rods 31 such that, as the handle is pulled 23 from its retracted position all the way to its extended position, the pivoting lever 30 pushes the release rods 31 away from the front of the removable module 2 to a rearward extended position (shown in outline in FIGURE 3). The extended release rods 31 push against an angled face of the spring-loaded latches 41, forcing the latches41 to retract. The latches 41 thus release engagement with the latch flanges 36,and the removable module 2 can be pulled by the handle 23 out of the docking base 1, separating the electrical connector 35 from the mating connector 40.
As noted above, the functions and features of the docking base 1 can be incorporated directly into a computer rack or enclosure. Thus, the mating connector 40 and spring-loaded latches 41 can be situated directly within a computer rack or enclosure rather than In a separate structure, while still functioning as a docking base 1 for a removable module 2.
Other configurations of latching and release mechanisms can also be used to 3 0 accornplish the same functions as the particular configuration of described above.
WO 91/07~43 c~ `' '`'~ .` ` `- PCI/US90/06542 One such mechanism includes a solenoid latch releasable by the position of the lock 24 as determined by the write-protect switches 26 or similar switches.
Another such mechanism is shown in FIGURES 5a and ~b. In FIGURE 5a a handle shi~t 50 is attached through a slip collar 51 to a latch actuator 52 having a raised region 53 near or at the other end. The latch actuator 52 is preferablyspring-biased towards the rear of the removable module 2. The latch actuator 52 is in mechanical contact with a spring-biased pivotable latch 54 having a catch flange 55. When the handle 23 is recessed within the removable module 2, the catch flange 55 engages a latch recess 56 in the docking base 1. An angled lo slide 59 on the docking base 1 forces the catch flange 55 down when the removable module 2 is inserted into the docking base 1, thus guiding the catch flange 55 into engagement with the latch recess 56.
When the handle 23 is pulled out towards its extended position, the handle sha~t50 slides through the slip collar 51 until a stop 57 (such as an o-ring) affixed to the handle shaft 50 catches on the slip collar 51 (see FIGUFIE 5b). Further pulling of the handle 23 will cause the latch actuator 52 to be pulled forward, thereby causing the raised region 53 of the latch actuator 52 to pivot the latch 54.
Preferably, a roller 59 is provided on the latch 54 as the contact point with the latch actuator 52, to reduce wear and the pull force. As the latch 54 pivots, the latch flange 55 disengages from the latch recess 56, thereby permitting the removable module 2 to be extracted from the docking base 1.
An additional feature provided by the invention is a mechanical and electrical configuration of the docking base 1 and removable module 2 designed to reduce or eliminate radio frequency interference (RFI) and electromagnetic interference(EMI). In the preferred embodiment, the case of the removable module 2 is of unitary construction, with all seams welded closed or shielded by internally positioned shielding materials (e.g., metal plates or foils). The number of openings in the removable module 2 is minimized to reduce the number of possible sites for RFI and EMI leakage. The shape of the docking base 1 in the preferred embodiment is such that the electrical connections between each removable module 2 and the docking base 1 are recessed within the shielding WO 91/07743 ~ 3 ~ ;'3 '` (`
walls of the docking base 1. In addition, the electrical connector 35 is surrounded by the sides of the enclosure of the removable module 2, up to the latch flanges36. Engagement of the spring-loaded latches 41 with the latch flanges 36 effectively forms an interlocking shield around the electrical connector 35 and the mating connector 40. Such interlocking substantially reduces or entirely eliminates RFI and EMI leakage Srom the electrical connector 35 and the mating connector 40.
Another feature permitted by the unitary construction of the removable module 2 is that all internal components (e.g., the disk drive 20, control circuit 29, etc.) can be mounted so that no fasteners are exposed except through the recessed region on the front of the removable module 2 that accommodates the handle 23. Thus, as shown in FIGURE 3, rear fasteners 37a secure the electrical connector 35 to the removable module 2 from the interior of the module. The front bezel of the removable module 2, which includes the handle 23, is secured to the module by front fasteners 37b. Since the front fasteners 37b are only accessible when the handle 23 is in its fully extended position, the removable module 2 can only be disassembled when the handle 23 is unlocked and fully extended.
Thus, the invention permits removal of a removable module 2 from a docking base 1 for transportation in a manner that prevents disassembly of the module to get access to the disk drive 20. Since the handle 23 can be locked into its recessedor intermediate, power-off position, access to the data on the disk drive 20 is denied, thereby enhancing security.
Another security feature option of the present invention is the addition of one or more counters (mechanical or electrical) to indicate (1) the number of insertions of a removable module 2 into a docking base 1, and/or (2) the number of times a disk drive 20 within a removable module 2 is powered up or down. Such a counter may be integrated into a removable module 2, or affixed within a dockingbase bay 3. The counter may optionally have a display 38 (see FIGURE 2) to indicate the count value. In the preferred embodiment of the invention, a counter _0 circuit is provided as part of the control circuit 29, and incremented by changes in state of the removal switch 32. Preferably, the counter circuit includes non-W O 91tO7743 ~ PC~r/US90/06542 ;` ~ `., ".
"-~ ! ` ' ` . ~ --16--volatile memory (such as a mechanical register or electrically-alterable read only memory) for storing the number of activations of the removal switch 32.
In summary, the lock 24 of the removable module 2 provides a means for activating the write-protect input of the enclosed disk drive 20. The docking base 1 may be securely fastened to other structures, such that the docking base 1 cannot be removed if it contains one or more locked removable modules 2. The removable module 2 can be positively and securely held within a bay 3 of a docking base 1 via a latching mechanism which can only be released by extension of the handle 23. The removable module 2 can be locked into place in a docking base 1 by locking the handle 23. The handle 23 further provides a means for safely spinning down an enclosed disk drive 20 before removal of its removable module 2 from a docking base 1. Moreover, the removable module 2 and the docking base 1 are designed to reduce tampering, and to reduce or eliminate radio frequency interference (RFI) and electromagnetic interference (EMI) by shielding points of possible signal leakage.
A number of embodiments of the present invention have been described.
Nevertheless, Tt will be understood that various modifications may be made without departing from the spirit and scope of the invention. For example, although the illustrated embodiment has been described in the context of magnetic disk drive 2 0 data storage devices, the invention could easily be adapted to other data storage devices, such as write-once-read-mostly ~WORM) optical drives and erasable optical drives. Accordingly, it is to be understood that the invention is not to be iimited by the specific illustrated embodiment, but only by the scope of the appended claims.
Claims (67)
1. A system for enclosing a write-protectable disk drive such that the disk drive is removable, the system including:
a. removable module means for receiving a disk drive of the type that includes means for providing a hardware write-protect control input, the removable module means further including:
i. first connector means for coupling the disk drive to power and signal lines external to the removable module means;
ii. switch means, coupled to the write-protect control input of the disk drive, for activating the write protect feature of the disk drive;
iii. lock means, mounted on the removable module means, for activating the switch means; and b. base unit means for removably receiving at least one removable module means, the base unit means including second connector means for coupling the first connector means to power and signal lines external to the base unit means.
a. removable module means for receiving a disk drive of the type that includes means for providing a hardware write-protect control input, the removable module means further including:
i. first connector means for coupling the disk drive to power and signal lines external to the removable module means;
ii. switch means, coupled to the write-protect control input of the disk drive, for activating the write protect feature of the disk drive;
iii. lock means, mounted on the removable module means, for activating the switch means; and b. base unit means for removably receiving at least one removable module means, the base unit means including second connector means for coupling the first connector means to power and signal lines external to the base unit means.
2. The system of Claim 1, wherein the lock means comprises a key lock.
3. The system of Claim 2, wherein the key lock includes positions correspond-ing to a first mode wherein the write protect feature is not activated, and to a second mode wherein the write protect feature is activated.
4. The system of Claim 3, wherein the key lock includes positions correspond-ing to a third mode wherein the the removable module is locked into the base unit, and to a fourth mode wherein the removable module is not locked into the base unit.
5. The system of Claim 1, further including power supply means for the disk drive situated within the base unit means.
6. The system of Claim 1, further including power supply means for the disk drive situated within the removable module means.
7. The system of Claim 1, further including means for securing the removable module means to the base unit means.
8. The system of Claim 7, wherein the means for securing the removable module means to the base unit means includes the lock means.
9. The system of Claim 8, wherein the means for securing the removable module means to the base unit means further includes a releasable latch.
10. The system of Claim 9, further including a handle attached to the removable module means and having a retracted position and at least one extended position, and wherein the releasable latch is coupled to the handle and released when the handle is extended from its retracted position to at least one extended position.
11. The system of Claim 10, wherein the releasable latch is lockable by means of the lock means.
12. The system of Claim 10, wherein the handle is lockable by means of the lock means, thereby locking the releasable latch.
13. The system of Claim 1, further including means for securely attaching the base unit means to other structures.
14. The system of Claim 13, further including means for securing the removable module means to the base unit means.
15. -The system of Claim 14, wherein the means for securing the removable module means to the base unit means prevents the detachment of the base unit means from such other structures.
16. The system of Claim 15, wherein the means for securing the removable module means to the base unit means includes the lock means.
17. The system of Claim 16, wherein the means for securing the removable module means to the base unit means further includes a releasable latch.
18. The system of Claim 17, further including a handle attached to the removable module means and having a retracted position and at least one extended position, and wherein the releasable latch is coupled to the handle and released when the handle is extended from its retracted position to at least one extended position.
19. The system of Claim 18, wherein the releasable latch is lockable by means of the lock means.
20. The system of Claim 18, wherein the handle is lockable by means of the lock means, thereby locking the releasable latch.
21. The system of Claim 1, wherein the lock means is a key lock that includes positions corresponding to a first mode wherein the write protect feature is not activated and the removable module is locked into the base unit, to a second mode wherein the write protect feature is activated and the removable module is locked into the base unit, and to a third mode wherein the removable module is not locked into the base unit.
22. The system of Claim 21, further including means for preventing the operationof the disk drive if the removable module is removed from the base unit and the key lock is placed in either of the first or second modes.
23. The system of Claim 1, wherein the lock means is a key lock that includes positions corresponding to a first mode wherein the write protect feature is not activated and the removable module is not locked into the base unit, to a second mode wherein the write protect feature is activated and the removable module is not locked into the base unit, and to a third mode wherein the removable module is locked into the base unit.
24. The system of Claim 23, further including means for preventing the operationof the disk drive if the removable module is removed from the base unit and the key lock is placed in the third mode.
25. The system of Claim 1, further including means, operable by the lock means, for preventing the insertion of the removable module into the base unit.
26. The system of Claim 1, further including second switch means, coupled to the write-protect control input of the disk drive and concealed from access when the removable module is mounted within the base unit, for activating the write protect feature of the disk drive.
27. The system of Claim 1, further including indicator means, coupled to the switch means, for indicating that the write protect feature of the disk drive is activated.
28. The system of Claim 1, further including:
a. first interlock means, situated around the first connector means and having an interlocking interface, for providing shielding against radiated signal emissions;
b. second interlock means, situated around the second connector means and having an interlocking interface, for providing shielding against radiated signal emissions;
wherein the interlocking interface of the first interlock means engages the interlocking interface of the second interlock means when the first and second connectors means are coupled, and wherein the engaged first and second interlock means substantially shield radiated signals emitted from the first and second connector means.
a. first interlock means, situated around the first connector means and having an interlocking interface, for providing shielding against radiated signal emissions;
b. second interlock means, situated around the second connector means and having an interlocking interface, for providing shielding against radiated signal emissions;
wherein the interlocking interface of the first interlock means engages the interlocking interface of the second interlock means when the first and second connectors means are coupled, and wherein the engaged first and second interlock means substantially shield radiated signals emitted from the first and second connector means.
29. The system of Claim 1, wherein the base unit means includes a bay means for providing shielding against radiated signal emissions, and the second connector means is recessed within the bay means.
30. The system of Claim 1, further including means for interrupting the rotation of the disk drive platters.
31. The system of Claim 30, wherein the means for interrupting the rotation of the disk drive platters includes a handle attached to the removable module means and having a retracted position and at least one extended position, and wherein the rotation of the disk drive platters is interrupted when the handle is extended from its retracted position to an extended position.
32. The system of Claim 31, further including indicator means, coupled to the means for interrupting the rotation of the disk drive platters, for indicating the rotational status of the platters.
33. A removable module for a disk drive adapted to be received in a base unit, including:
a. means for receiving a disk drive of the type that includes means for providing a hardware write-protect control input;
b. first connector means for coupling the disk drive to power and signal lines to a base unit;
c. switch means, coupled to the write-protect control input of the disk drive, for activating the write protect feature of the disk drive;
d. lock means, mounted on the removable module, for activating the switch means.
a. means for receiving a disk drive of the type that includes means for providing a hardware write-protect control input;
b. first connector means for coupling the disk drive to power and signal lines to a base unit;
c. switch means, coupled to the write-protect control input of the disk drive, for activating the write protect feature of the disk drive;
d. lock means, mounted on the removable module, for activating the switch means.
34. The removable module of Claim 33, wherein the lock means comprises a key lock.
35. The system of Claim 34, wherein the key lock includes positions correspond-ing to a first mode wherein the write protect feature is not activated, and to a second mode wherein the write protect feature is activated.
36. The system of Claim 35, wherein the key lock includes positions correspond-ing to a third mode wherein the the removable module is locked into a base unit, and to a fourth mode wherein the removable module is not locked into the base unit.
37. The system of Claim 33, wherein the lock means is a key lock that includes positions corresponding to a first mode wherein the write protect feature is not activated and the removable module is locked into a base unit, to a second mode wherein the write protect feature is activated and the removable module is locked into the base unit, and to a third mode wherein the removable module is not locked into the base unit.
38. The system of Claim 37, further including means for preventing the operationof the disk drive if the removable module is removed from the base unit and the key lock is placed in either of the first or second modes.
39. The system of Claim 33, wherein the lock means is a key lock that includes positions corresponding to a first mode wherein the write protect feature is not activated and the removable module is not locked into a base unit, to a second mode wherein the write protect feature is activated and the removable module is not locked into the base unit, and to a third mode wherein the removable module is locked into the base unit.
40. The system of Claim 39, further including means for preventing the operationof the disk drive if the removable module is removed from the base unit and the key lock is placed in the third mode.
41. The system of Claim 33, further including means, operable by the lock means, for preventing the insertion of the removable module into a base unit.
42. The removable module of Claim 33, further including power supply means for the disk drive, the power supply being situated within the removable module.
43. The removable module of Claim 33, further including indicator means, coupled to the switch means, for indicating that the write protect feature of the disk drive is activated.
44. The removable module of Claim 33, further including means for interrupting the rotation of the disk drive platters.
45. The system of Claim 44, wherein the means for interrupting the rotation of the disk drive platters includes a handle attached to the removable module means and having a retracted position and at least one extended position, and wherein the rotation of the disk drive platters is interrupted when the handle is extended from its retracted position to an extended position.
46. The system of Claim 45, wherein the lock means includes means for locking the handle, and further including means for preventing the operation of the disk drive if the handle is locked in an extended position.
47. The system of Claim 45, further including indicator means, coupled to the means for interrupting the rotation of the disk drive platters, for indicating the rotational status of the platters.
48. The system of Claim 1, wherein the lock means further includes a position corresponding to a mode wherein the removable module is locked into the base unit with the disk drive inoperative.
49. The system of Claim 1, further including counting means, actuatable by insertion of the removable module means into the base unit means, for counting the number of insertions of the removable module means into the base unit means.
50. The system of Claim 49, further including display means, coupled to the counting means, for indicating the count value of the counting means.
51. The system of Claim 50, further including non-volatile memory means, coupled to the counting means, for storing the count value of the counting means.
52. The system of Claim 1, further including counting means, actuatable by a change in the application of power to the disk drive within the removable module means, for counting the number of applications of power to the disk drive.
53. The system of Claim 52, further including display means, coupled to the counting means, for indicating the count value of the counting means.
54. The system of Claim 53, further including non-volatile memory means, coupled to the counting means, for storing the count value of the counting means.
55. The system of Claim 1, wherein the base unit means further includes encryption circuit means, electrically connected to the signal lines, for encrypting data to be stored on the disk drive, and for decrypting data stored on the disk drive.
56. The system of Claim 1, wherein the removable module means further includes:
a. a handle attached to the removable module means and having a retracted position and at least one extended position;
b. means for securing the disk drive within the removable module such that the disk drive cannot be removed from the removable module when the handle is in its retracted position.
a. a handle attached to the removable module means and having a retracted position and at least one extended position;
b. means for securing the disk drive within the removable module such that the disk drive cannot be removed from the removable module when the handle is in its retracted position.
57. The system of Claim 56, wherein the handle is lockable by means of the lock means.
58. The system of Claim 33, wherein the lock means further includes a position corresponding to a mode wherein the removable module is locked into the base unit with the disk drive inoperative.
59. The system of Claim 33, further including counting means, actuatable by insertion of the removable module into the base unit, for counting the number of insertions of the removable module into the base unit.
60. The system of Claim 59, further including display means, coupled to the counting means, for indicating the count value of the counting means.
61. The system of Claim 60, further including non-volatile memory means, coupled to the counting means, for storing the count value of the counting means.
62. The system of Claim 33, further including counting means, actuatable by a change in the application of power to the disk drive within the removable module, for counting the number of applications of power to the disk drive.
63. The system of Claim 62, further including display means, coupled to the counting means, for indicating the count value of the counting means.
64. The system of Claim 63, further including non-volatile memory means, coupled to the counting means, for storing the count value of the counting means.
65. The system of Claim 33, further including:
a. a handle attached to the removable module means and having a retracted position and at least one extended position;
b. means for securing the disk drive within the removable module such that the disk drive cannot be removed from the removable module when the handle is in its retracted position.
a. a handle attached to the removable module means and having a retracted position and at least one extended position;
b. means for securing the disk drive within the removable module such that the disk drive cannot be removed from the removable module when the handle is in its retracted position.
66. The system of Claim 65, wherein the handle is lockable by means of the lock means.
67. The system of Claim 1, wherein the removable module means further includes releasable latch means for securing the removable module means to the base unit means, including a handle coupled to a latch having a catch flange, the handle having a retracted position and at least one extended position, and wherein the releasable latch is released when the handle is extended from its retracted position to at least one extended position; and wherein the base unit means further includes a latch recess for receiving the catch flange of the latch.
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US438,528 | 1989-11-17 | ||
US07/438,528 US5126890A (en) | 1989-11-17 | 1989-11-17 | Removable data storage drive security module with lockable write protect feature |
US61175590A | 1990-11-13 | 1990-11-13 | |
US611,755 | 1990-11-13 |
Publications (1)
Publication Number | Publication Date |
---|---|
CA2068884A1 true CA2068884A1 (en) | 1991-05-18 |
Family
ID=27031684
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CA002068884A Abandoned CA2068884A1 (en) | 1989-11-17 | 1990-11-16 | Removable disk drive security module with lockable write protect feature |
Country Status (4)
Country | Link |
---|---|
US (1) | US5280398A (en) |
AU (1) | AU6749090A (en) |
CA (1) | CA2068884A1 (en) |
WO (1) | WO1991007743A1 (en) |
Families Citing this family (22)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5394552A (en) * | 1990-11-19 | 1995-02-28 | Seiko Epson Corp. | Docking system for enhancing computer functionality |
JP3004150B2 (en) * | 1993-08-16 | 2000-01-31 | 株式会社東芝 | Disk storage device protection case and external disk storage unit |
FR2714984A1 (en) * | 1994-01-10 | 1995-07-13 | Vuillemin Jean Remy | Economic system intended to make removable the internal hard disk of microcomputers for the processing of classified information. |
JPH08138307A (en) * | 1994-09-16 | 1996-05-31 | Toshiba Corp | Information storage device |
EP0770997A3 (en) * | 1995-10-27 | 1998-01-07 | Ncr International Inc. | Password protection for removable hard drive |
US6052781A (en) * | 1997-02-21 | 2000-04-18 | Savvy Frontiers Property Trust | Multiple user computer including anti-concurrent user-class based disjunctive separation of plural hard drive operation |
GB2328547A (en) * | 1997-08-19 | 1999-02-24 | Chang Cheng Chun | Diskdrive sliding case system |
US6236563B1 (en) * | 1999-06-30 | 2001-05-22 | Dell Usa, L.P. | Retention apparatus for a peripheral device |
US6883125B2 (en) * | 2002-01-24 | 2005-04-19 | International Business Machines Corporation | Logging insertion/removal of server blades in a data processing system |
AU2003300949A1 (en) * | 2002-12-16 | 2004-07-22 | Diebold, Incorporated | Automated banking machine currency dispenser modules |
JP4170864B2 (en) * | 2003-02-03 | 2008-10-22 | 大日本スクリーン製造株式会社 | Substrate processing apparatus, substrate transport method and substrate processing method in substrate processing apparatus |
US7209981B1 (en) | 2004-01-09 | 2007-04-24 | Z Microsystems, Inc. | System and method for switching data storage devices and multiple processors |
SG118244A1 (en) * | 2004-04-23 | 2006-01-27 | Mi Holdings Pte Ltd | Radio-frequency and electro-magnetic isolation forcover and isolated cover |
TWI296787B (en) | 2005-01-19 | 2008-05-11 | Lightuning Tech Inc | Storage device and method for protecting data stored therein |
EP1890519A1 (en) * | 2006-08-18 | 2008-02-20 | BRITISH TELECOMMUNICATIONS public limited company | Environmental monitor |
US8085501B2 (en) | 2008-01-29 | 2011-12-27 | Imation Corp. | Reader including an interposer that prevents coupling with write-protected data cartridges |
US20110199225A1 (en) * | 2010-02-15 | 2011-08-18 | Honeywell International Inc. | Use of token switch to indicate unauthorized manipulation of a protected device |
US8842018B2 (en) * | 2010-08-30 | 2014-09-23 | Sanmina-Sci Corporation | Systems and methods for tracking insertion and removal cycles of optical transceiver modules |
US8824131B2 (en) * | 2011-04-01 | 2014-09-02 | Germane Systems, Llc | Disk drive mounting assembly |
US10339328B1 (en) | 2014-07-15 | 2019-07-02 | Cru Acquisition Group, Llc | Securing stored computer files from modification |
US11004467B2 (en) * | 2018-05-11 | 2021-05-11 | Seagate Technology Llc | Data storage device with data writer deactivation responsive to security threats |
US11335376B1 (en) | 2021-01-28 | 2022-05-17 | Seagate Technology Llc | Drive controller-override mechanism |
Family Cites Families (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4062049A (en) * | 1976-04-02 | 1977-12-06 | Burroughs Corporation | Integrated Disk File Module and memory storage system |
US4593192A (en) * | 1983-06-20 | 1986-06-03 | Targa Electronics Systems Inc. | Electronic circuit module and holder therefor |
US4912580A (en) * | 1984-01-17 | 1990-03-27 | Norand Corporation | Information storage system with readily removable high capacity disk drive unit |
FR2576131B1 (en) * | 1985-01-17 | 1987-03-20 | Dassault Electronique | MODULAR ELECTRONIC MEMORY RECORDING / PLAYING DEVICE |
US4956733A (en) * | 1985-07-29 | 1990-09-11 | Tandon Corporation | Storage media transducer loading/unloading and carriage lock mechanism |
US4833554A (en) * | 1987-02-25 | 1989-05-23 | Tandon Corporation | Hard disk drive module and receptacle therefor |
US4870643A (en) * | 1987-11-06 | 1989-09-26 | Micropolis Corporation | Parallel drive array storage system |
-
1990
- 1990-11-16 AU AU67490/90A patent/AU6749090A/en not_active Abandoned
- 1990-11-16 CA CA002068884A patent/CA2068884A1/en not_active Abandoned
- 1990-11-16 WO PCT/US1990/006542 patent/WO1991007743A1/en active Application Filing
-
1993
- 1993-01-25 US US08/008,214 patent/US5280398A/en not_active Expired - Lifetime
Also Published As
Publication number | Publication date |
---|---|
AU6749090A (en) | 1991-06-13 |
WO1991007743A1 (en) | 1991-05-30 |
US5280398A (en) | 1994-01-18 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US5126890A (en) | Removable data storage drive security module with lockable write protect feature | |
US5280398A (en) | Removable data storage drive security module with lockable write protect feature | |
US7251132B1 (en) | Receiving frame having removable computer drive carrier and lock | |
US8060893B2 (en) | Data storage cartridge with optical waveguide | |
US5377512A (en) | Disk drive lock assembly | |
EP0793164B1 (en) | Docking station for portable computer | |
US4794587A (en) | Disk drive lock | |
US6182481B1 (en) | Security lock for laptop and notebook computers | |
US5305621A (en) | Computer drive lockout device | |
US5933322A (en) | Computer docking station with integral base security system | |
US5826922A (en) | Rotary latch assembly for a computer housing | |
US6952342B1 (en) | Double locking device for removable disk drive | |
GB2328547A (en) | Diskdrive sliding case system | |
US5786995A (en) | Avionics system having access through hinged display and control panel | |
US6208506B1 (en) | Space saving CD-ROM/DVD drive mechanism used with electronic devices | |
JP3324531B2 (en) | Information processing device | |
US4551999A (en) | Lock assembly for enclosure cover | |
US4188648A (en) | Data security apparatus for magnetic recording disc drive | |
US6270030B1 (en) | System for controlling compatibility of tape cartridges having the same form factor | |
JPH10241064A (en) | Stealing prevention device and its casing | |
CN109524882B (en) | Pressing plate locking device | |
CN220830575U (en) | Latch device, hard disk bracket and electronic equipment | |
CN107386823A (en) | A kind of electronic lock | |
JPH09297632A (en) | Electronics | |
JP2586533Y2 (en) | Small electronic equipment |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
FZDE | Dead |